{"id":2769,"date":"2015-12-21T17:29:50","date_gmt":"2015-12-21T17:29:50","guid":{"rendered":"http:\/\/www.garysieling.com\/blog\/?p=2769"},"modified":"2015-12-21T17:29:50","modified_gmt":"2015-12-21T17:29:50","slug":"2769-2","status":"publish","type":"post","link":"https:\/\/www.garysieling.com\/blog\/2769-2\/","title":{"rendered":"Logstash: fixing permission denied errors"},"content":{"rendered":"<p>If you set up logstash to monitor \/var\/log, you may get errors like this:<\/p>\n<pre>\n{:timestamp=>\"2015-12-21T17:21:42.809000+0000\", :message=>\"failed to open \/var\/log\/auth.log: Permission denied - \/var\/log\/auth.log\", :level=>:warn}\n{:timestamp=>\"2015-12-21T17:21:42.828000+0000\", :message=>\"failed to open \/var\/log\/kern.log: Permission denied - \/var\/log\/kern.log\", :level=>:warn}\n<\/pre>\n<p>Fortunately this is easy to fix &#8211; by default logstash creates it&#8217;s own user and group, and you can add it&#8217;s user to the group that owns these log files:<\/p>\n<pre lang=\"bash\">\nsudo usermod -a -G adm logstash \nsudo service logstash restart\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>If you set up logstash to monitor \/var\/log, you may get errors like this: {:timestamp=>&#8221;2015-12-21T17:21:42.809000+0000&#8243;, :message=>&#8221;failed to open \/var\/log\/auth.log: Permission denied &#8211; \/var\/log\/auth.log&#8221;, :level=>:warn} {:timestamp=>&#8221;2015-12-21T17:21:42.828000+0000&#8243;, :message=>&#8221;failed to open \/var\/log\/kern.log: Permission denied &#8211; \/var\/log\/kern.log&#8221;, :level=>:warn} Fortunately this is easy to fix &#8211; by default logstash creates it&#8217;s own user and group, and you can add it&#8217;s &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.garysieling.com\/blog\/2769-2\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Logstash: fixing permission denied errors&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[9],"tags":[198,347],"aioseo_notices":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/posts\/2769"}],"collection":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/comments?post=2769"}],"version-history":[{"count":0,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/posts\/2769\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/media?parent=2769"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/categories?post=2769"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/tags?post=2769"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}